CVE-2016-2357: Use of Hard-coded Credentials

Milesight IP security cameras through 2016-11-14 have a hardcoded SSL private key under the /etc/config directory...

CVE-2016-2360: Use of Hard-coded Credentials

Milesight IP security cameras through 2016-11-14 have a default root password in /etc/shadow that is the same across different customers' installations...

CVE-2016-2359: Improper Authentication

Milesight IP security cameras through 2016-11-14 allow remote attackers to bypass authentication and access a protected resource by simultaneously making a request for the unprotected vb.htm resource...

PT-2019-7819

Name of the Vulnerable Software and Affected Versions Milesight IP security cameras versions prior to 2016-11-14 Description The issue allows remote attackers to bypass authentication and access a protected resource. This is achieved by simultaneously making a request for the unprotected vb.htm...

PT-2019-7817

Name of the Vulnerable Software and Affected Versions Milesight IP security cameras versions prior to 2016-11-14 Description The issue concerns a hardcoded SSL private key located under the /etc/config directory. Recommendations For Milesight IP security cameras versions prior to 2016-11-14,...

PT-2019-7820

Name of the Vulnerable Software and Affected Versions Milesight IP security cameras versions prior to 2016-11-14 Description The issue concerns a default root password in /etc/shadow that is identical across different installations of the affected cameras. Recommendations For Milesight IP securit...

PT-2019-7818

Name of the Vulnerable Software and Affected Versions Milesight IP security cameras versions prior to 2016-11-14 Description The issue concerns Milesight IP security cameras that have a default set of 10 privileged accounts with hardcoded credentials. These accounts are accessible if the customer...

CVE-2016-2358: Use of Hard-coded Credentials

Milesight IP security cameras through 2016-11-14 have a default set of 10 privileged accounts with hardcoded credentials. They are accessible if the customer has not configured 10 actual user accounts...

PT-2019-7816

Name of the Vulnerable Software and Affected Versions Milesight IP security cameras versions prior to 2016-11-14 Description The issue is related to a buffer overflow in the web application of the cameras, which can be triggered by a long username or password. Recommendations For versions prior t...

Milesight Network Camera Detection

Detect Milesight Network Cameras. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113230";...

Milesight Network Cameras Default Credentials (HTTP)

Milesight Network Cameras use the default credentials admin:ms1234. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

MileSight camera privilege control page unauthorized access vulnerability

MileSight camera is a network camera produced by Xiamen PulseVision Digital Technology Co. An unauthorized access vulnerability exists in the privilege control page of MileSight camera. An unauthorized attacker can use the vulnerability to execute arbitrary commands...

MileSight camera Web UI CGI Buffer Overflow Vulnerability

MileSight camera is a network camera produced by Xiamen PulseVision Digital Technology Co. A Web UI CGI buffer overflow vulnerability exists in MileSight camera. An attacker can exploit the vulnerability to cause the camera's web interface to crash and remotely execute arbitrary code...

MileSight camera multiple built-in default account vulnerabilities

MileSight camera is a network camera produced by Xiamen PulseVision Digital Technology Co. MileSight camera has multiple built-in default account vulnerabilities. The default configuration of the MileSight camera device has three authenticated accounts and seven unauthenticated accounts. If the...

MileSight camera default private key certificate vulnerability

MileSight camera is a network camera produced by Xiamen PulseVision Digital Technology Co. MileSight camera suffers from a default private key certificate vulnerability. Since all cameras share the same secret key, an attacker can exploit the vulnerability to launch a man-in-the-middle attack whe...

MileSight camera default SSH root user vulnerability

MileSight camera is a network camera produced by Xiamen PulseVision Digital Technology Co. MileSight camera has a default SSH root user vulnerability. An attacker can use the vulnerability to log in to the device via root and obtain the highest privileges of the device...